This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
File:                     3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json)
Hash identifier:          kMsJqGs1tB8gRDq05hUlwnuN4EsALJ4oDAGuho2in7E=
Subject key identifier:   6B:6A:C8:1B:B6:A3:DA:32:64:3F:27:E3:C1:A4:9D:65:3B:6B:64:77
Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Certificate issuer:       /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Certificate serial:       7A9558F2F3E5BE0ACB41CFF858E3571D81399320
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
Manifest number:          014B
Signing time:             Sun 25 Jan 2026 01:02:36 +0000
Manifest this update:     Sun 25 Jan 2026 00:57:36 +0000
Manifest next update:     Mon 26 Jan 2026 03:32:36 +0000
Files and hashes:         1: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: gt6BWfRYxE6JxJNRe+pkZe4daMM51lRl2Razv/VLQiU=)
                          2: 3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa (hash: 85gBMcl8T92cShSttg2IE1+cL7srToN1WMPpMffNR/c=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 03:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:95:58:f2:f3:e5:be:0a:cb:41:cf:f8:58:e3:57:1d:81:39:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
        Validity
            Not Before: Jan 25 00:57:36 2026 GMT
            Not After : Jan 26 03:32:36 2026 GMT
        Subject: CN=6B6AC81BB6A3DA32643F27E3C1A49D653B6B6477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:7c:4e:61:40:79:f8:3a:b6:ea:56:f3:f9:
                    7e:1a:b9:13:1e:ab:7b:41:c2:3b:5f:95:f7:61:03:
                    b0:8f:89:20:80:86:5b:1c:67:9d:ec:76:6a:89:45:
                    ae:9e:ea:31:ab:71:8f:4f:f3:f6:da:7d:fe:7d:e1:
                    7c:d9:ab:ac:b4:9a:8f:92:d2:70:13:68:85:37:4a:
                    28:26:4d:61:67:04:94:a3:f1:4c:75:42:42:54:42:
                    7d:32:f1:06:60:4f:da:38:9c:fe:cf:99:19:97:a8:
                    60:29:06:48:4a:db:2b:63:fa:ba:95:4b:9f:85:2e:
                    76:4e:e2:b5:f2:5b:31:9b:03:98:0a:1b:1c:95:20:
                    e4:02:56:52:a5:64:3d:fa:78:2a:ec:83:9b:10:fd:
                    1e:68:62:7a:de:28:40:c0:fc:db:32:8f:01:0f:6d:
                    b0:97:ae:46:84:7a:b5:80:fd:14:b6:cf:d2:b9:6c:
                    0a:e1:8c:a9:2d:91:b9:b2:3a:ae:47:ff:42:d2:a2:
                    a9:40:b7:3c:ae:63:d9:db:64:a9:35:10:5c:a6:24:
                    f6:50:12:67:7a:78:b1:5a:55:f0:45:ba:38:37:ee:
                    14:f8:07:76:25:b3:ec:8c:25:10:a4:00:25:96:f3:
                    31:b9:48:12:2d:6d:17:82:5b:84:91:98:8f:f4:25:
                    7a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6A:C8:1B:B6:A3:DA:32:64:3F:27:E3:C1:A4:9D:65:3B:6B:64:77
            X509v3 Authority Key Identifier:
                keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:8d:f5:22:0d:5e:86:06:60:c6:b8:80:22:81:d8:da:81:d4:
         58:56:fd:ba:95:66:73:40:8c:00:d9:6c:96:44:a2:52:55:34:
         4c:22:a8:75:a8:bd:67:35:ed:96:22:8d:65:2a:bc:60:97:b3:
         da:88:a9:c0:39:9b:bd:61:75:a0:42:c3:36:f1:61:74:13:cc:
         e1:3d:b8:ae:49:ee:7f:4f:fd:d2:35:50:80:0d:b6:ff:ad:67:
         6c:00:f2:7e:82:b9:52:8e:6b:60:57:a4:f3:2c:4f:ec:ff:d3:
         71:4d:fe:0d:f4:a8:be:25:1c:f5:9a:d8:bd:f4:0d:dc:57:c4:
         aa:58:79:44:25:fa:af:15:0a:c8:ca:1e:22:ce:6d:2d:14:3e:
         f7:e6:0d:53:bd:45:94:5b:ea:a0:0d:cc:e9:51:04:65:38:16:
         6d:5c:03:4a:a6:65:12:ef:00:35:df:90:5f:8a:6e:2a:6d:4c:
         16:cc:b2:78:ba:85:1a:c3:bb:de:c3:cb:16:3d:ae:0e:20:6d:
         de:d9:0f:57:a4:1e:8e:70:c7:66:bc:c1:37:5a:cb:58:f4:f6:
         ce:27:44:77:0c:9a:0a:dc:19:b8:cb:fb:8e:0e:e3:60:fc:37:
         43:ca:08:58:49:87:75:d7:97:4f:b9:95:fc:dd:80:64:01:a4:
         c9:50:9b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:50:41 2026 by rpki-client